Senior InfoSec Leader: Strategy, Governance & Cloud

ACT Group; Amsterdam; On-site; EUR 110,000 - 150,000; Full time

Job summary

ACT Group is strengthening its information security capabilities as it builds a more integrated digital platform. The Senior Information Security Officer will own the enterprise security strategy and governance at Group level, shaping risk appetite and resilience across core operations and client-facing platforms.

The role leads security governance, secure-by-design across products, and enterprise risk management while ensuring GDPR, DORA and ISO/NIST standards are embedded, and reporting to

Qualifications

• Bachelor's degree in Information Security or related field.
• 10–15 years in information security with 5+ years in a senior role.
• Experience in security governance, risk management and incident readiness.
• Experience in trading/financial services advantageous.
• Certifications such as CISSP, CISM or CISA desirable.
• Strong communication and stakeholder-management skills.

Responsibilities

• Own the Group-wide information security strategy and risk appetite.
• Establish security governance with policies and control frameworks.
• Embed security-by-design across products and client platforms.
• Lead enterprise security risk management and incident response.
• Secure cloud and infrastructure with Zero-Trust controls.
• Ensure GDPR, DORA and relevant obligations; coordinate audits.

Skills

Enterprise security

Security governance

Cloud security

Regulatory compliance

Stakeholder management

ISO/IEC 27001

Education

Bachelor's in Information Security or related field

Job description

ACT Group is strengthening its information security capabilities as it builds a more integrated digital platform. The Senior Information Security Officer will own the enterprise security strategy and governance at Group level, shaping risk appetite and resilience across core operations and client-facing platforms.

The role leads security governance, secure-by-design across products, and enterprise risk management while ensuring GDPR, DORA and ISO/NIST standards are embedded, and reporting to